Name: When Employees Depart: Ensuring Access to Sensitive Data is Removed
Start: 2023-05-25T19:07:00Z
End: 2023-05-25T19:07:21.000Z
Location: BrightTALK
Rating: 5

Designed for hybrid multi-cloud environments, Veza enables users to easily understand, manage and control who can and should take what action on what data. Veza solves the toughest identity security challenges enterprises face today by visualizing an authorization metadata graph across identity providers, Cloud IAM solutions, data systems, and SaaS and custom applications. This empowers customers to leverage the power of authorization for an identity-first approach to securing enterprise data, addressing critical business needs tied to access governance, data lake security and governance, cloud entitlements management, privileged access management, and many more.  Global enterprises like Blackstone, Intuit, Wynn Resorts, Choice Hotels, and a number of Fortune 500 and emerging organizations trust Veza for their use cases to secure data. Founded in 2020, Veza is headquartered in Los Gatos, California and is funded by Accel, Bain Capital, Ballistic Ventures, GV, and Norwest Venture Partners.

While there are many benefits to SaaS apps like Salesforce, those SaaS apps present a new attack surface that is vulnerable to bad actors, creating new avenues for phishing, credential theft, ransomware, and insider threats.

Neither security nor IT teams can see the true state of permissions. Nobody can answer “who can do what with your data?”  

In addition, identity reports also miss local users (or local admins!) leading to new risks—compliance, regulatory, and exposure to bad actors. As SaaS adoption grows, the attack surface expands. 

Join us for an informative webinar on how to reduce your SaaS exposure around improperly managed local accounts and permissions.

In this webinar, experts from Veza will explain:

- How to reduce risk as your investment in SaaS increases.
- How to do compliance audits for SaaS access.
- How to thwart and mitigate the “blast radius” from Insider attacks.

Join us and learn how to secure data in your SaaS apps while automating the work of access reviews and compliance, putting data security back within reach.

Securing Access to Data in SaaS Apps

Data breaches continue to rise yearly; the US reported 1800 breaches in 2022. Many enterprises are turning to Zero Trust to combat these risks to protect their organization from the never-ending barrage of attacks, ransomware, phishing, or password theft. During this conversation, we will discuss why Zero Trust is important and what it will take for companies to make Zero Trust actionable.  

Panelists:
Nicole Perlroth is an award-winning cybersecurity journalist for the New York Times, where her work has been optioned for both film and television. She is a regular lecturer at the Stanford Graduate School of Business and a graduate of Princeton University and Stanford University.

Ted Schlein's legendary career in venture capital spanning 25 years at Kleiner Perkins and more than 30 years in cybersecurity make him uniquely qualified to lead the Ballistic team as a General Partner. His roles as operator, founder, investor and advisor have resulted in the creation of companies that have fundamentally shaped the cybersecurity landscape, while returning billions of dollars to shareholders. Ted provides counsel to the U.S. intelligence community, serves on the Board of Trustees at InQTel, and was recently named as a board member of the CISA Cybersecurity Advisory Committee. 

Tarun Thakur is CEO and co-founder of Veza, the authorization platform for identity-first security. Tarun and his co-founders founded Veza in 2020 to address one of the toughest issues in enterprise security today: who can take what action on what data. Veza has established a robust customer base consisting of Fortune 500 and global enterprises like Intuit, Blackstone, Wynn Resorts, ASAPP, Barracuda Networks, Choice Hotels, and many more. Veza has raised $110M+ in venture financing from leading firms such as Accel, Google Ventures, Norwest, and Ballistic Ventures.

On Demand Now : The hard thing about zero trust

The Translational Genomics Research Institute (TGen) is a pioneer in the biotechnology industry conducting groundbreaking genomic research that has been advancing standards of care and improving patient outcomes for over 20 years. The institute has built a flexible environment to support big data analytics for genomic research (every diagnosis means the computing equivalent of assembling a 3-billion-piece jigsaw puzzle). Join us for a webinar with John Forrister, Vice President Information Security at TGen, to hear his approach in balancing security vs usability to enable researchers to access data where and when they need it. In this session we discuss how TGen

-Builds access controls that are flexible to meet the rapidly changing technology requirements of the institute
-Maintains least privilege access control to data across their hybrid, multi-cloud environment
-Strengthens the security posture of the institute based on the CIA triad (Confidentiality, Integrity, and Availability)

Case Study: How TGen Secures their Data with Identity-First Security

During this webinar Jason Simpson, VP of Engineering at Choice Hotels, will discuss his strategy to secure the massive amounts of both customer and franchisee data the company collects and why shifting to an identity-first security solution for data was key to advancing their security strategy for their multi-cloud environment. Join the webinar to learn:
- How Choice Hotels is leveraging the power of authorization to solve challenges around managing cloud entitlements for sensitive data across identity providers (Okta) and data systems (AWS)
- Why visibility into identity-to-data relationships is needed to drive strong data governance
- How to secure data during mergers and acquisitions (M&A)
- How Choice Hotels will use Veza to meet compliance and privacy regulation like like Payment Card Industry Data Security Standard (PCI DSS), General Data Protection Regulation (GDPR), Sarbanes–Oxley (SOX)

Choice Hotels’ Identity-First Approach to Secure Enterprise Data

In today's threat landscape, customers need modern cloud entitlements management, privileged access for multi-cloud, and repeatable access review practices. Veza’s platform is built on the power of authorization to make it easy to understand, manage, and control who can and should take what action on what data. Veza has broad applicability in terms of data security integrations and use-cases and in this demo, we will showcase how Veza can help provide identity-centric data lake security.

Demo: Veza for Data Lake Security

Hear from David Tyburski, CISO at Wynn Resorts, about the importance of providing phenomenal, data-driven customer experiences, and how their security business plays a major part in doing so. As a leading hospitality company, Wynn must adapt their security posture to meet the needs of a growing, global business. Watch this video to learn why Wynn Resorts partnered with Veza to ensure access to applications, data, and infrastructure stay secure through strong data governance, privileged access management, and entitlement reviews.

Wynn Resorts: Securing cloud data access for a growing, global business

In this demo, we showcase how Veza delivers identity-first security rooted in the power of authorization for AWS, including AWS IAM, S3, Redshift, Compute, and more. We demonstrate how organizations can utilize Veza's Authorization Graph to gain insights into identity-to-data relationships and streamline access and entitlement reviews for AWS.

Veza Demo: Securing Data in AWS

In this demo, we showcase how Veza delivers identity-first security rooted in the power of authorization for Google Cloud services, including Google Cloud IAM, BigQuery, Cloud Storage, Compute, and more.
We demonstrate how organizations can utilize Veza's Authorization Platform to
 -gain insights into identity-to-data relationships across Google Cloud
 -secure both Google Cloud data to which multi-cloud identities have permissions and multi-cloud data that is being accessed by Google Cloud identities.

Veza Demo: Securing Data in Google Cloud

Authorization plays a critical part in accelerating zero trust initiatives by helping organizations secure what matters the most - data. In this webinar you will learn: 
- How unstructured cloud data has created the need for the next phase of data security
- Why identities and access to data can be really hard to stitch together for security and compliance teams
- How Veza’s Authorization Graph provides complete visibility of permissions across Barracuda’s application portfolio

Meet Veza - Bringing the Trust Back to Zero Trust

As a totally data-centric company, Bluecore,a cloud-native marketing technology company, can't leave anything to chance. Bluecore enables major retail brands to deliver personalized product offerings to online shoppers with the aim of transforming casual browsers into lifetime customers. With the growing prevalence of privacy regulations like the EU’s GDPR (General Data Protection Regulation) and the CCPA (California Consumer Privacy Act), it’s a critical for Bluecore to stay on top of all the data the company possesses and know where it resides, who has permission to access it, and how it’s being protected. Learn how Bluecore manages permissions and cloud entitlements with Veza to better control and secure data by bringing visibility to cloud data sources and infrastructure.

Securing Data for a Cloud Native Organization

Establishing true end-to-end security starts with authorization. Learn why authorization is critical for modern data security and why Google Ventures believes it is time to modernize the future of securing data in the cloud.

The Future of Securing Data in the Cloud with Google Ventures

Meet Veza, the authorization management platform. This short video gives you an overview of what Veza is and how it can help you enterprise secure data within your organization so you can confidently understand who can take what action on what data.

Meet Veza, The Authorization Management Platform

When employees leave your organization, how sure are you that they are actually gone?

It’s easy to deactivate in AD or SSO, but that doesn’t percolate down to hundreds of apps and systems. Incomplete deactivation and removal of your departed employees’ access creates risk that is difficult to see—and may linger indefinitely.

Without a clear view into who has access to what, you can’t even assess this risk. Especially with larger reductions in force, hundreds or thousands of employees may need deactivation. What can organizations do to protect themselves and minimize the risks of incomplete deactivation?

Don’t leave a backdoor open for insider threats.

In this webinar you’ll learn:

The different types of access and threat vectors exposed during deactivation
How apps and cloud systems add complexity (Salesforce, Github, Snowflake, AWS IAM)
How organizations use continuous monitoring to eliminate hidden access and reduce risk of abuse

When Employees Depart: Ensuring Access to Sensitive Data is Removed

Cyber Security

Identity Management

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

When Employees Depart: Ensuring Access to Sensitive Data is Removed

Presented by

About this talk

More from this channel